浏览代码

Check for active Intel backdoor

Bob Mottram 8 年前
父节点
当前提交
d6222879d2
共有 1 个文件被更改,包括 15 次插入0 次删除
  1. 15
    0
      src/freedombone-utils-setup

+ 15
- 0
src/freedombone-utils-setup 查看文件

@@ -371,6 +371,18 @@ function disable_nfs_insecure_locks {
371 371
     fi
372 372
 }
373 373
 
374
+function check_for_AMT {
375
+    if [[ $ARCHITECTURE == 'arm'* ]]; then
376
+        return
377
+    fi
378
+
379
+    pci_hardware=$(lspci)
380
+    if [[ "$pci_hardware" == *"MEI"* || "$pci_hardware" == *"HECI"* ]]; then
381
+        echo $'Intel Active Management Technology (Management Engine) was detected. This is an active backdoor.'
382
+        exit 782352
383
+    fi
384
+}
385
+
374 386
 function set_login_umask {
375 387
     sed -i 's|UMASK\t.*|UMASK\t\t077|g' /etc/login.defs
376 388
 }
@@ -601,6 +613,9 @@ function setup_utils {
601 613
     read_config_param "PROJECT_REPO"
602 614
     write_config_param "PROJECT_REPO" "$PROJECT_REPO"
603 615
 
616
+    function_check check_for_AMT
617
+    check_for_AMT
618
+
604 619
     function_check separate_tmp_filesystem
605 620
     separate_tmp_filesystem 150
606 621